Symantec
250-513 · Question #70
A DLP administrator is writing one policy to block sensitive data from being copied to removable media. The administrator is applying two response rules to the policy: 'Endpoint Prevent: Notify' and…
The correct answer is A. there are different conditions for the different response actions. See the full explanation below for the reasoning.
Question
A DLP administrator is writing one policy to block sensitive data from being copied to removable media. The administrator is applying two response rules to the policy: 'Endpoint Prevent: Notify' and 'Endpoint Prevent: Block'. Why are some copies blocked while others are only notified?
Options
- Athere are different conditions for the different response actions
- Bthe monitor and ignore filters are defined incorrectly
- Cthe DLP administrator needs to fine tune the throttling options
- Dthe Directory Group Matching (DGM) profile has users in different groups
How the community answered
(35 responses)- A86% (30)
- B9% (3)
- C3% (1)
- D3% (1)
Community Discussion
No community discussion yet for this question.